Security

Data Storage Site Security

Your data is stored in secured facilities with layered access controls, including:

Physical access to the data centers is limited to authorized personnel, verified through biometric authentication.

On-site security includes guards, closed-circuit video monitoring, man traps, and additional intrusion protection measures.

Network Security

Your data travels across networks protected from unauthorized access‚-both internally and externally, by:

Running regular external and internal vulnerability scans and notifying relevant parties of any findings.

Maintaining perimeter defenses such as firewalls and data loss prevention solutions.

Monitoring network activity through security information event management (SIEM) to identify detect anomalous behavior and threats in real time.

Enforcing network access controls to ensure only authenticated and authorized devices and users can connect to internal network resources.

Platform Security

Every server, workstation, and cloud environment hosting your data is protected against both known and emerging threats, by:

Deploying and maintaining up-to-date anti-virus and anti-malware protection across all operating systems.

Keeping operating systems securely configured and regularly updated to address known vulnerabilities.

Data Confidentiality

Your data stays confidential wherever it is stored, transmitted, or processed, through:

Encrypting data to block unauthorized interception or access.

Securely disposing of the data in line with defined retention policies.

Strictly controlling who can view or handle confidential data, with access limited to authorized personnel.

Data Access

Only authorized Tekion personnel can access your data through controlled and audited means, by:

Requiring unique usernames, passwords, and multi-factor authentication for remote access to systems hosting your data.

Enforcing least privilege principles - ensuring access is granted only when authorized and revoked when no longer needed.

Maintaining segregation of duties and reviewing access permissions regularly.

Data Processing

Every time your data is processed by Tekion, these security practices apply:

Enforcing data handling policies and running regular security awareness training so every employee understands their responsibilities.

Training developers in secure coding techniques and keeping them current as threats and best practices evolve.

Conducting periodic reviews of data processing activities to ensure ongoing compliance with security policies and applicable regulations.

Third-Party Security Procedures

Every third party that accesses your data is assessed and held to Tekion’s security standards, through:

Vetting third-party with access to personal data, requiring confidentiality agreements before access is granted, and communicating data handling policies to all relevant staff.

Reviewing sub-processors and third parties to confirm they meet the security controls required by Tekion's information security policies.

Incident Management Procedure

Tekion’s incident management process is built to detect, contain, and recover from incidents in a timely manner, through:

Following a structured response process covering detection, containment, eradication, recovery, and post-incident review to minimize the impact of any data compromise.

Notifying affected individuals and relevant parties of any incident within legally required timeframes.

Regularly testing and updating breach response procedures to ensure they remain effective and aligned with evolving regulatory requirements and industry standards.

Availability and continuity

Keeping your service online and recoverable is a top priority and the measures taken to ensure this include:

Maintaining multiple geographically diverse data centers to reduce the risk of service disruption and ensure resilience against localized failures.

Running disaster recovery and business continuity programs that are tested and reviewed regularly to stay effective and reliable.

Monitoring system performance and availability continuously to identify and resolve potential issues before they affect service delivery.

For more information on our service levels, please see <a href="https://cloud.tekion.ai/legal/tekion-service-level-agreement">Our Service Level Agreement</a>.

Frequently Asked Questions

Does Tekion have any internal policies regarding data privacy and information security?

Who has access to our data?

Do you have an appointed information security officer?

Does Tekion use multi-factor authentication?

Do you have a vulnerability management, penetration testing or bug bounty programs? If so, which apply?

Do you have Service Level Availability Policy (SLA) in place and communicated to the customer?

How will Tekion notify me if there's a security incident affecting my data?